We are not a delivery app. We are the API.
Delivery, pasuyo, and loyalty as one programmable engine. Bring your brand — we bring the rails and the riders. The four consumer apps are just the first client of this. Below is the same API any partner system calls: one key, a real order, a signed webhook back. No SDK, no headers to fake.
1
Register a webhook
Tell PASUYO where to POST signed order events. Tenant comes from the key — you can't spoof it.
2
Place an order
POST /orders with the key. The engine validates the order, runs the guarded state machine, and fires the bus.
3
Receive the signed event
PASUYO POSTs the order event to your callback with an x-pasuyo-signature HMAC you verify with your secret.
This is the whole pitch: an order placed by curl moves through the exact same engine — points,
COD settlement, AI care, notifications, dispatch — as one placed in the Customer app, and your system
hears about every state change, signed. Money never moves without a human gate. Tenants are isolated by
a hard security boundary (a Tenant-A key returns 403 on Tenant-B).
Base URL: /api · see also the 9 consumer apps.